Privacy

Gotta holds space.
This is what that means for your data.

A coaching container is only worth trusting if it can't see into you more than you invite it to. We built ours so your identity and your story stay apart.

How we keep what you say yours

Three doors. One key. No through-road.

We separate who you are from what you say, so no single part of the system can ever reconnect your name to your story.

Identity

Who you are

Recognising you on your return — held as scrambled, one-way identifiers, not your plain name or number.

Sessions

What you say

Your conversations and transcripts — filed under a random code, never under who you are.

Deep vault

The hardest to hold

The confessions and fears you'd least want seen — encrypted, with the key kept separate from them.

One guarded key, that you can destroy

Nothing joins these doors together except a single key held separately. Ask us to forget you, and we destroy the key — your story stays, but it can never be traced back to you again, by anyone, including us.

We show the idea, not the blueprint. Where this lives is our secret, not yours to carry — no single breach reveals who you are.

How it's secured

Security through separation, not secrecy of effort. Nothing is impenetrable, which is why we architect things so that breaking in anywhere still shouldn't reveal who you are.

Encrypted at rest

The data we hold most carefully is encrypted with strong, industry-standard cryptography (AES-256). The keys are stored separately from the data they protect.

No plain identifiers

Where we need to recognise you on return, we keep a one-way, non-reversible hash — not your phone number or name in clear text.

Least access

Only the systems that must, for the service to run, can reach your data. A coach sees a prepared summary — never the raw conversation that created it.

What holds the container together

  • Your conversation. The messages you share, used to continue your work and to generate summaries for you and, with your knowledge, your coach.
  • Basic identifiers. Stored in hashed, non-reversible form so we can recognise you on return without holding plain personal data.
  • Insights you share about your goal, habits and progress — the substance of the container.

What we never do

  • We do not sell your data. Never have, never will.
  • We do not share raw conversations with third parties. This is a container, not a recording studio.
  • Not medical or crisis support. Coaching is not therapy or diagnosis. If you're in crisis, contact emergency services.

Your control: full transparency and erasure

This is your container, not ours. You can see what we hold about you, take a copy, and make us forget you — and each is a genuine removal, not a tidy-up.

See what we know

Email privacy@gotta.today and we'll tell you, in plain language and in full, what we hold about you and how it's kept apart.

Take a copy with you

Request an export of your data at any time. It belongs to you.

/forget in Telegram

Type /forget in the bot. It deletes your data immediately and irreversibly, including the key that joined your conversations to you.

From anywhere

Write to privacy@gotta.today asking for deletion or a copy. We comply fully.

How erasure works: we don't hide your data — we destroy the single key that joins “who you are” to “what you said.” Whatever remains is a story with no owner, that can never be traced back to you by us or anyone else.

Legal details

Legal basis. We process conversation data on the basis of your consent and the performance of the coaching service you're using. You may withdraw consent at any time via /forget or by contacting privacy@gotta.today.

Data protection. Gotta operates in the UK and applies the principles of the UK GDPR and the Data Protection Act 2018. Data is stored securely and access is restricted to those who need it to run the coaching service.

Your rights. Under applicable data protection law you have the right to access, rectify, export, and erase your personal data; to restrict or object to certain processing; and to lodge a complaint with the Information Commissioner's Office (ICO).

Contact. privacy@gotta.today. For anything time-sensitive in a crisis, use emergency services.

Version 1.0 · Last updated 2026-09-02